The download site has never been hacked, the security is high enough according to our current viewpoint. (On the other hand, it's always possible with any site that it has been hacked, but in our case, this has very little probability.)
The "malicious code" that infected BWL forum in March exploited a bug in the forum software, so it had nothing to do with the server's security level.
All in all, you don't have to worry when downloading known bwl material from the BWL server (Of course we can't follow what files are added to bwl mirrors that are updated by a third party -- such as G3's bwl mirror. If a file is already infected when it's uploaded, we can't do anything, of course).